Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa
File: 9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa (raw, json)
Hash identifier: vDFXwIgN9+rvQg7n9H4Gm5sudBx72Wh/es+SQxG5oEY=
Subject key identifier: 0E:25:32:72:8B:26:E2:D4:66:E8:84:09:93:40:80:F0:DA:B4:A4:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 767C1C5CF2F0CFF62678BF29496A2EC8F5F6BDCC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa
Signing time: Mon 31 Mar 2025 20:30:06 +0000
ROA not before: Mon 31 Mar 2025 20:30:06 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:a080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7c:1c:5c:f2:f0:cf:f6:26:78:bf:29:49:6a:2e:c8:f5:f6:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:30:06 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:94:e8:fb:7d:3a:f8:e8:c3:1e:3b:a8:06:
af:65:85:76:f4:61:10:29:07:91:68:fd:c3:07:8b:
48:2c:40:6b:68:3a:09:a1:67:0c:78:18:80:f6:44:
21:cb:91:0e:c6:1c:00:8a:87:b6:f8:cf:46:a6:dd:
29:8a:f4:29:db:89:46:0f:84:60:77:28:c4:8f:b1:
d4:43:92:a1:ec:60:2e:72:f6:fd:d7:b6:03:26:33:
56:97:97:25:fa:63:fe:ad:f2:f1:13:9e:df:74:09:
90:01:cb:95:eb:9c:fb:16:4a:31:52:ce:5c:f4:85:
08:7c:2d:39:30:d4:95:89:b0:9c:89:d9:70:40:9f:
01:e7:85:3c:26:3d:66:de:8d:7a:e0:5c:12:1d:c1:
ca:ac:2c:bf:74:e0:46:c7:46:b4:e2:03:2e:c0:b5:
84:97:c9:b9:9f:9a:13:ee:1f:a5:32:77:cf:a6:5f:
f3:36:90:78:e2:2a:d7:cd:de:7d:1e:54:99:8f:d9:
20:06:b5:54:9f:7a:bc:d9:fc:25:dc:01:db:3d:1c:
d0:88:5a:14:ed:b6:f0:df:b4:ea:29:b8:98:85:09:
f4:25:34:ea:f6:03:42:f0:83:5a:32:b7:ae:57:26:
ac:c4:0c:ee:35:0e:a6:17:10:73:4b:4d:eb:a6:86:
e1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:25:32:72:8B:26:E2:D4:66:E8:84:09:93:40:80:F0:DA:B4:A4:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:a080::/46
Signature Algorithm: sha256WithRSAEncryption
82:62:94:97:5a:3f:36:57:fe:22:7c:e9:9a:98:30:d4:d7:79:
e0:fc:de:f4:0f:b5:b5:09:ca:98:2c:c2:8b:4e:32:da:ff:63:
62:8e:03:55:ab:22:6c:75:5f:5d:f7:15:8f:a7:15:21:82:fe:
92:a7:fa:00:7e:b2:ca:15:6e:e4:ad:c3:9c:7f:8b:0a:51:44:
5c:f2:35:66:4a:06:25:ca:25:42:4c:ea:eb:c4:4f:cd:9b:98:
71:d6:8f:73:52:9c:ce:96:f8:84:02:81:c2:36:d1:29:0f:08:
e9:12:3e:12:7a:a8:cd:a3:c2:aa:d1:27:42:76:67:fa:04:3b:
0f:d3:c7:a2:6a:f8:94:f7:a1:12:8e:c0:e1:9a:7c:ab:d1:2e:
b9:db:47:30:9d:a6:77:49:be:a2:cd:de:de:2e:e9:7a:2c:0b:
78:92:1a:e7:b7:87:26:c4:6b:b7:9e:8a:9a:92:97:1f:f3:46:
9f:b4:35:8b:b7:76:96:b1:82:68:b3:12:97:36:8b:40:b9:d2:
32:67:8f:ba:cf:9e:dd:c9:05:69:28:0c:40:37:8d:fb:15:72:
9e:88:b2:26:b0:6e:14:ea:e5:01:46:9f:0c:e9:03:76:89:27:
08:9b:7a:1b:34:6e:73:6c:e6:14:94:d5:3c:b1:ef:bf:e2:c8:
c2:f9:e8:8e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUdnwcXPLwz/YmeL8pSWouyPX2vcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzEyMDMwMDZaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDE2NTMyYmE1ZTM1NDhiMGQ1M2Y4OWEyMzM3YzU0N2QxODQxZDQ3YWI4YjRh
ODY3NTJjM2VhYzc5NmExNmEzYzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJwslOj7fTr46MMeO6gGr2WFdvRhECkHkWj9wweLSCxAa2g6CaFnDHgYgPZE
IcuRDsYcAIqHtvjPRqbdKYr0KduJRg+EYHcoxI+x1EOSoexgLnL2/de2AyYzVpeX
Jfpj/q3y8ROe33QJkAHLleuc+xZKMVLOXPSFCHwtOTDUlYmwnInZcECfAeeFPCY9
Zt6NeuBcEh3Byqwsv3TgRsdGtOIDLsC1hJfJuZ+aE+4fpTJ3z6Zf8zaQeOIq183e
fR5UmY/ZIAa1VJ96vNn8JdwB2z0c0IhaFO228N+06im4mIUJ9CU06vYDQvCDWjK3
rlcmrMQM7jUOphcQc0tN66aG4XUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQOJTJy
iybi1GbohAmTQIDw2rSkYjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWQwYTc3NzQtNjdkNy00NjY0LWFjMGYtNGUyMTRiNzVmMWM4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Hug
gDANBgkqhkiG9w0BAQsFAAOCAQEAgmKUl1o/Nlf+Inzpmpgw1Nd54Pze9A+1tQnK
mCzCi04y2v9jYo4DVasibHVfXfcVj6cVIYL+kqf6AH6yyhVu5K3DnH+LClFEXPI1
ZkoGJcolQkzq68RPzZuYcdaPc1Kczpb4hAKBwjbRKQ8I6RI+EnqozaPCqtEnQnZn
+gQ7D9PHomr4lPehEo7A4Zp8q9EuudtHMJ2md0m+os3e3i7peiwLeJIa57eHJsRr
t56KmpKXH/NGn7Q1i7d2lrGCaLMSlzaLQLnSMmePus+e3ckFaSgMQDeN+xVynoiy
JrBuFOrlAUafDOkDdoknCJt6GzRuc2zmFJTVPLHvv+LIwvnojg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:09 2025 by rpki-client